I agree, it's a thorny technical issue, for sure. My thinking is that the issue isn't actually technical, but one of risk management, and that's something that

I agree, it's a thorny technical issue, for sure. My thinking is that the issue isn't actually technical, but one of risk management, and that's something that markets are very good at dealing with. I would guess that there would be quite a few companies out there willing to step in and certify/insure code quality, for the right price. Of course, DOD and other more sensitive systems are a completely different animal with respect to risk, so this wouldn't necessary apply there.